npm install @gaviwhatsapp/whatsapp

import { WhatsApp } from '@gaviwhatsapp/whatsapp'

const wa = new WhatsApp({ apiKey: process.env.GAVIVENTURES_API_KEY! })

// Text message
await wa.send({ to: '+919876543210', text: 'Hello!' })

// Template message (pre-approved by Meta)
await wa.sendTemplate({
  to: '+919876543210',
  template: 'order_confirmation',
  language: 'en',
  variables: { '1': 'ORD-1234' },
})

// Media message
await wa.sendMedia({
  to: '+919876543210',
  type: 'image',
  url: 'https://example.com/photo.jpg',
})

// Broadcast to many
await wa.broadcast({
  recipients: ['+919876543210', '+919876543211'],
  template: 'promo_offer',
})

// List templates
const { templates } = await wa.getTemplates()

// Register webhook
const wh = await wa.registerWebhook({
  url: 'https://myapp.com/api/webhook',
  events: ['message.received'],
})
// Save wh.secret as-is (do NOT strip the `whsec_` prefix or base64-decode).

{
  "event": "message.received",
  "timestamp": "2026-04-16T22:51:33.273Z",
  "message_id": "wamid.HBgM...",
  "from": "91987654321",
  "type": "text",
  "text": "your plain message text"
}

import express from 'express'
import { createHmac, timingSafeEqual } from 'crypto'

const app = express()

app.use(express.json({
  verify: (req, _res, buf) => {
    (req as any).rawBody = buf.toString('utf8')
  },
}))

app.post('/webhook', (req, res) => {
  const received = req.headers['x-gaviventures-signature'] as string
  const computed = createHmac('sha256', process.env.WEBHOOK_SECRET!)
    .update((req as any).rawBody)
    .digest('hex')

  const ok =
    typeof received === 'string' &&
    received.length === computed.length &&
    timingSafeEqual(Buffer.from(received), Buffer.from(computed))

  if (!ok) return res.sendStatus(401)
  // event is at req.body; use '+' + event.from to reply
  return res.sendStatus(200)
})

import { verifyWebhookSignature } from '@gaviwhatsapp/whatsapp'
const ok = verifyWebhookSignature(rawBody, signature, secret)